LongTail Log Analysis

Assorted Statistics

Analysis does not include today's numbers. Numbers rounded to two decimal places

Created on Wed May 22 19:00:04 EDT 2019

Normalized data is data that consists of only full days of attacks, AND to servers that are NOT protected by firewalls or other kinds of intrusion protection systems.

Time
Frame
Number
of Days
Total
Webpages Requested
Average
Per Day
Std. Dev. Median Max Min
All Hosts Combined
Time
Frame
Number
of Days
Total
Webpages Requested
Average
Per Day
Std. Dev. Median Max Min
ALL Hosts So Far Today10N/AN/AN/AN/AN/A
ALL Hosts This Month 20 1,803 90.15 144.56 14.5 533 2
ALL Hosts Last Month 30 3,335 111.17 167.32 12 480 2
ALL Hosts This Year 140 11,024 78.74 119.76 18.5 533 0
ALL Hosts Since Logging Started 1,219 161,847 132.77 254.98 68 4,447 0
ALL Hosts Normalized Since Logging Started 2,085 58,730 28.17 146.25 7 4,253 0
IP Address Count
Time
Frame
Number
of Days
Count Average
Per Day
Std. Dev. Median Max Min
ALL Hosts So Far Today10N/AN/AN/AN/AN/A
ALL Hosts This Month 20N/A 8.90 3.75 12.5 20 2
ALL Hosts Last Month 30N/A 9.13 4.75 3.5 22 2
ALL Hosts This Year 140N/A 10.23 5.02 2 26 0
ALL Hosts Since Logging Started 1,219N/A 26.34 21.44 31 317 0
ALL Hosts Normalized Since Logging Started 1,219N/A 26.34 21.44 31 317 0
IP Address Overlap With Longtail Ssh Count
Time
Frame
Number
of Days
Count Average
Per Day
Std. Dev. Median Max Min
ALL Hosts So Far Today10N/AN/AN/AN/AN/A
ALL Hosts This Month 20N/A 0.00 0.00 0 0 0
ALL Hosts Last Month 30N/A 0.00 0.00 0 0 0
ALL Hosts This Year 140N/A 0.00 0.00 0 0 0
ALL Hosts Since Logging Started 1,219N/A 0.63 1.46 0 17 0
ALL Hosts Normalized Since Logging Started 1,219N/A 0.63 1.46 0 17 0
-Uniq-Ips Txt Count
Time
Frame
Number
of Days
Count Average
Per Day
Std. Dev. Median Max Min
ALL Hosts So Far Today10N/AN/AN/AN/AN/A
ALL Hosts This Month 20N/A 7.25 3.28 6 17 2
ALL Hosts Last Month 30N/A 7.60 3.95 5 18 1
ALL Hosts This Year 140N/A 8.38 4.40 4 19 0
ALL Hosts Since Logging Started 1,219N/A 15.18 17.68 25 293 0
ALL Hosts Normalized Since Logging Started 1,219N/A 15.18 17.68 25 293 0
404 Webpages Count
Time
Frame
Number
of Days
Count Average
Per Day
Std. Dev. Median Max Min
ALL Hosts So Far Today10N/AN/AN/AN/AN/A
ALL Hosts This Month 20N/A 82.25 143.08 282 521 0
ALL Hosts Last Month 30N/A 103.53 165.28 17 474 0
ALL Hosts This Year 140N/A 69.45 118.75 2 521 0
ALL Hosts Since Logging Started 1,190N/A 89.69 239.80 3 4,304 0
ALL Hosts Normalized Since Logging Started 1,190N/A 89.69 239.80 3 4,304 0
Uniq 404 Webpages Count
Time
Frame
Number
of Days
Count Average
Per Day
Std. Dev. Median Max Min
ALL Hosts So Far Today10N/AN/AN/AN/AN/A
ALL Hosts This Month 20N/A 72.35 119.54 264.5 388 0
ALL Hosts Last Month 30N/A 90.40 142.12 141.5 428 0
ALL Hosts This Year 140N/A 61.42 101.90 2 428 0
ALL Hosts Since Logging Started 1,190N/A 40.25 64.62 21 697 0
ALL Hosts Normalized Since Logging Started 1,190N/A 40.25 64.62 21 697 0
Uniq Shellshock Webpages Count
Time
Frame
Number
of Days
Count Average
Per Day
Std. Dev. Median Max Min
ALL Hosts So Far Today10N/AN/AN/AN/AN/A
ALL Hosts This Month 20N/A 0.00 0.00 0 0 0
ALL Hosts Last Month 30N/A 0.00 0.00 0 0 0
ALL Hosts This Year 140N/A 0.00 0.00 0 0 0
ALL Hosts Since Logging Started 1,190N/A 1.71 15.04 0 391 0
ALL Hosts Normalized Since Logging Started 1,190N/A 1.71 15.04 0 391 0
Shellshock Count
Time
Frame
Number
of Days
Count Average
Per Day
Std. Dev. Median Max Min
ALL Hosts So Far Today10N/AN/AN/AN/AN/A
ALL Hosts This Month 20N/A 0.00 0.00 0 0 0
ALL Hosts Last Month 30N/A 0.00 0.00 0 0 0
ALL Hosts This Year 140N/A 0.00 0.00 0 0 0
ALL Hosts Since Logging Started 1,219N/A 1.88 15.32 0 391 0
ALL Hosts Normalized Since Logging Started 1,219N/A 1.88 15.32 0 391 0
Uniq Webpages Count
Time
Frame
Number
of Days
Count Average
Per Day
Std. Dev. Median Max Min
ALL Hosts So Far Today10N/AN/AN/AN/AN/A
ALL Hosts This Month 20N/A 74.15 119.63 19.5 390 1
ALL Hosts Last Month 30N/A 92.27 142.12 20 429 1
ALL Hosts This Year 140N/A 63.47 101.97 155 429 0
ALL Hosts Since Logging Started 1,190N/A 44.91 65.52 26 743 0
ALL Hosts Normalized Since Logging Started 1,190N/A 44.91 65.52 26 743 0
Wget Webpages Count
Time
Frame
Number
of Days
Count Average
Per Day
Std. Dev. Median Max Min
ALL Hosts So Far Today10N/AN/AN/AN/AN/A
ALL Hosts This Month 20N/A 0.00 0.00 0 0 0
ALL Hosts Last Month 30N/A 0.00 0.00 0 0 0
ALL Hosts This Year 140N/A 0.00 0.00 0 0 0
ALL Hosts Since Logging Started 1,190N/A 1.71 15.04 0 391 0
ALL Hosts Normalized Since Logging Started 1,190N/A 1.71 15.04 0 391 0
 
Hosts protected by BlackRidge Technologies
 
Hosts protected by an Intrusion Protection System
 
Educational Sites
 
Residential Sites
Time
Frame
Number
of Days
Total
SSH attempts
Average
Per Day
Std. Dev.MedianMaxMin
shepherd Residential server
Time
Frame
Number
of Days
Total
Webpages Requested
Average
Per Day
Std. Dev. Median Max Min
shepherd So Far Today10N/AN/AN/AN/AN/A
shepherd This Month 14 141 10.07 24.26 2 96 0
shepherd Last Month 26 1,936 74.46 144.94 3.5 513 1
shepherd This Year 117 3,797 32.45 81.75 5 513 0
shepherd Since Logging Started 1,060 35,327 33.33 52.24 10 513 0
shepherd Normalized Since Logging Started 1,060 35,327 33.33 52.24 10 513 0
IP Address Count
Time
Frame
Number
of Days
Count Average
Per Day
Std. Dev. Median Max Min
shepherd So Far Today10N/AN/AN/AN/AN/A
shepherd This Month 14N/A 2.36 1.76 2 7 0
shepherd Last Month 26N/A 4.12 3.00 3 13 1
shepherd This Year 117N/A 4.09 2.89 3 13 0
shepherd Since Logging Started 1,061N/A 6.95 6.31 2 49 0
shepherd Normalized Since Logging Started 1,061N/A 6.95 6.31 2 49 0
IP Address Overlap With Longtail Ssh Count
Time
Frame
Number
of Days
Count Average
Per Day
Std. Dev. Median Max Min
shepherd So Far Today10N/AN/AN/AN/AN/A
shepherd This Month 14N/A 0.00 0.00 0 0 0
shepherd Last Month 26N/A 0.00 0.00 0 0 0
shepherd This Year 117N/A 0.00 0.00 0 0 0
shepherd Since Logging Started 1,061N/A 0.10 0.38 0 4 0
shepherd Normalized Since Logging Started 1,061N/A 0.10 0.38 0 4 0
-Uniq-Ips Txt Count
Time
Frame
Number
of Days
Count Average
Per Day
Std. Dev. Median Max Min
shepherd So Far Today10N/AN/AN/AN/AN/A
shepherd This Month 14N/A 1.93 1.75 1.5 6 0
shepherd Last Month 26N/A 2.65 2.11 2 9 0
shepherd This Year 117N/A 2.55 2.63 2 11 0
shepherd Since Logging Started 1,060N/A 3.72 5.11 2 47 0
shepherd Normalized Since Logging Started 1,060N/A 3.72 5.11 2 47 0
404 Webpages Count
Time
Frame
Number
of Days
Count Average
Per Day
Std. Dev. Median Max Min
shepherd So Far Today10N/AN/AN/AN/AN/A
shepherd This Month 14N/A 8.14 23.66 0 92 0
shepherd Last Month 26N/A 70.96 144.99 1 512 0
shepherd This Year 117N/A 28.86 81.46 1 512 0
shepherd Since Logging Started 1,052N/A 19.79 43.03 16 512 0
shepherd Normalized Since Logging Started 1,052N/A 19.79 43.03 16 512 0
Uniq 404 Webpages Count
Time
Frame
Number
of Days
Count Average
Per Day
Std. Dev. Median Max Min
shepherd So Far Today10N/AN/AN/AN/AN/A
shepherd This Month 14N/A 7.64 21.89 0 85 0
shepherd Last Month 26N/A 63.92 129.07 1 467 0
shepherd This Year 117N/A 26.15 71.53 1 467 0
shepherd Since Logging Started 1,052N/A 12.98 36.05 13 467 0
shepherd Normalized Since Logging Started 1,052N/A 12.98 36.05 13 467 0
Uniq Shellshock Webpages Count
Time
Frame
Number
of Days
Count Average
Per Day
Std. Dev. Median Max Min
shepherd So Far Today10N/AN/AN/AN/AN/A
shepherd This Month 14N/A 0.00 0.00 0 0 0
shepherd Last Month 26N/A 0.00 0.00 0 0 0
shepherd This Year 117N/A 0.00 0.00 0 0 0
shepherd Since Logging Started 1,052N/A 0.33 4.34 0 86 0
shepherd Normalized Since Logging Started 1,052N/A 0.33 4.34 0 86 0
Shellshock Count
Time
Frame
Number
of Days
Count Average
Per Day
Std. Dev. Median Max Min
shepherd So Far Today10N/AN/AN/AN/AN/A
shepherd This Month 14N/A 0.00 0.00 0 0 0
shepherd Last Month 26N/A 0.00 0.00 0 0 0
shepherd This Year 117N/A 0.00 0.00 0 0 0
shepherd Since Logging Started 1,060N/A 0.33 4.32 0 86 0
shepherd Normalized Since Logging Started 1,060N/A 0.33 4.32 0 86 0
Uniq Webpages Count
Time
Frame
Number
of Days
Count Average
Per Day
Std. Dev. Median Max Min
shepherd So Far Today10N/AN/AN/AN/AN/A
shepherd This Month 14N/A 8.57 21.97 1 86 0
shepherd Last Month 26N/A 65.31 129.09 2 468 1
shepherd This Year 117N/A 27.36 71.67 19 468 0
shepherd Since Logging Started 1,052N/A 14.98 36.47 120 468 0
shepherd Normalized Since Logging Started 1,052N/A 14.98 36.47 120 468 0
Wget Webpages Count
Time
Frame
Number
of Days
Count Average
Per Day
Std. Dev. Median Max Min
shepherd So Far Today10N/AN/AN/AN/AN/A
shepherd This Month 14N/A 0.00 0.00 0 0 0
shepherd Last Month 26N/A 0.00 0.00 0 0 0
shepherd This Year 117N/A 0.00 0.00 0 0 0
shepherd Since Logging Started 1,052N/A 0.33 4.34 0 86 0
shepherd Normalized Since Logging Started 1,052N/A 0.33 4.34 0 86 0
 
Cloud Provider Sites
Time
Frame
Number
of Days
Total
SSH attempts
Average
Per Day
Std. Dev.MedianMaxMin
AWS AWS-Amazon Webservices webserver
Time
Frame
Number
of Days
Total
Webpages Requested
Average
Per Day
Std. Dev. Median Max Min
AWS So Far Today10N/AN/AN/AN/AN/A
AWS This Month 15 0 0.00 0.00 0 0 0
AWS Last Month 28 0 0.00 0.00 0 0 0
AWS This Year 116 0 0.00 0.00 0 0 0
AWS Since Logging Started 1,025 23,403 22.83 201.57 0 4,253 0
AWS Normalized Since Logging Started 1,025 23,403 22.83 201.57 0 4,253 0
IP Address Count
Time
Frame
Number
of Days
Count Average
Per Day
Std. Dev. Median Max Min
AWS So Far Today10N/AN/AN/AN/AN/A
AWS This Month 15N/A 0.00 0.00 0 0 0
AWS Last Month 28N/A 0.00 0.00 0 0 0
AWS This Year 116N/A 0.00 0.00 0 0 0
AWS Since Logging Started 1,025N/A 5.37 8.30 0 109 0
AWS Normalized Since Logging Started 1,025N/A 5.37 8.30 0 109 0
IP Address Overlap With Longtail Ssh Count
Time
Frame
Number
of Days
Count Average
Per Day
Std. Dev. Median Max Min
AWS So Far Today10N/AN/AN/AN/AN/A
AWS This Month 15N/A 0.00 0.00 0 0 0
AWS Last Month 28N/A 0.00 0.00 0 0 0
AWS This Year 116N/A 0.00 0.00 0 0 0
AWS Since Logging Started 1,025N/A 0.18 0.52 0 7 0
AWS Normalized Since Logging Started 1,025N/A 0.18 0.52 0 7 0
-Uniq-Ips Txt Count
Time
Frame
Number
of Days
Count Average
Per Day
Std. Dev. Median Max Min
AWS So Far Today10N/AN/AN/AN/AN/A
AWS This Month 15N/A 0.00 0.00 0 0 0
AWS Last Month 28N/A 0.00 0.00 0 0 0
AWS This Year 116N/A 0.00 0.00 0 0 0
AWS Since Logging Started 1,024N/A 2.94 6.40 0 103 0
AWS Normalized Since Logging Started 1,024N/A 2.94 6.40 0 103 0
404 Webpages Count
Time
Frame
Number
of Days
Count Average
Per Day
Std. Dev. Median Max Min
AWS So Far Today10N/AN/AN/AN/AN/A
AWS This Month 15N/A 0.00 0.00 0 0 0
AWS Last Month 28N/A 0.00 0.00 0 0 0
AWS This Year 116N/A 0.00 0.00 0 0 0
AWS Since Logging Started 1,017N/A 18.89 201.53 0 4,241 0
AWS Normalized Since Logging Started 1,017N/A 18.89 201.53 0 4,241 0
Uniq 404 Webpages Count
Time
Frame
Number
of Days
Count Average
Per Day
Std. Dev. Median Max Min
AWS So Far Today10N/AN/AN/AN/AN/A
AWS This Month 15N/A 0.00 0.00 0 0 0
AWS Last Month 28N/A 0.00 0.00 0 0 0
AWS This Year 116N/A 0.00 0.00 0 0 0
AWS Since Logging Started 1,017N/A 4.99 14.89 0 170 0
AWS Normalized Since Logging Started 1,017N/A 4.99 14.89 0 170 0
Uniq Shellshock Webpages Count
Time
Frame
Number
of Days
Count Average
Per Day
Std. Dev. Median Max Min
AWS So Far Today10N/AN/AN/AN/AN/A
AWS This Month 15N/A 0.00 0.00 0 0 0
AWS Last Month 28N/A 0.00 0.00 0 0 0
AWS This Year 116N/A 0.00 0.00 0 0 0
AWS Since Logging Started 1,017N/A 0.17 2.99 0 84 0
AWS Normalized Since Logging Started 1,017N/A 0.17 2.99 0 84 0
Shellshock Count
Time
Frame
Number
of Days
Count Average
Per Day
Std. Dev. Median Max Min
AWS So Far Today10N/AN/AN/AN/AN/A
AWS This Month 15N/A 0.00 0.00 0 0 0
AWS Last Month 28N/A 0.00 0.00 0 0 0
AWS This Year 116N/A 0.00 0.00 0 0 0
AWS Since Logging Started 1,025N/A 0.16 2.98 0 84 0
AWS Normalized Since Logging Started 1,025N/A 0.16 2.98 0 84 0
Uniq Webpages Count
Time
Frame
Number
of Days
Count Average
Per Day
Std. Dev. Median Max Min
AWS So Far Today10N/AN/AN/AN/AN/A
AWS This Month 15N/A 0.00 0.00 0 0 0
AWS Last Month 28N/A 0.00 0.00 0 0 0
AWS This Year 116N/A 0.00 0.00 0 0 0
AWS Since Logging Started 1,017N/A 5.97 15.34 0 172 0
AWS Normalized Since Logging Started 1,017N/A 5.97 15.34 0 172 0
Wget Webpages Count
Time
Frame
Number
of Days
Count Average
Per Day
Std. Dev. Median Max Min
AWS So Far Today10N/AN/AN/AN/AN/A
AWS This Month 15N/A 0.00 0.00 0 0 0
AWS Last Month 28N/A 0.00 0.00 0 0 0
AWS This Year 116N/A 0.00 0.00 0 0 0
AWS Since Logging Started 1,017N/A 0.17 2.99 0 84 0
AWS Normalized Since Logging Started 1,017N/A 0.17 2.99 0 84 0

Total SSH attempts for all hosts may be LARGER than the sum of SSH attempts of each host. This is because each host's attacks are counted before totalling all the SSH attacks, and if attacks are ongoing, then more attacks will have come in between counting for a host and counting all the SSH attacks.


LongTail Copyright 2015 by Eric Wedaa, under GPLV2